Lucene search
+L

39 matches found

NVD
NVD
•added 2026/10/13 1:16 a.m.•13 views

CVE-2026-108944

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

4.8CVSS0.00123EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/13 12:30 a.m.•25 views

CVE-2026-108944 repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

2.4CVSS5.3AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/13 12:30 a.m.•11 views

CVE-2026-108944 repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

4.8CVSS4.8AI score0.00123EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/13 12:30 a.m.•16 views

CVE-2026-108944

The RAE repository is vulnerable to a code injection flaw within the Config-Driven Model Instantiation component. Specifically, the get_obj_from_str function in src/utils/model_utils.py allows for code injection when the Target argument is manipulated. This vulnerability requires local access to ...

4.8CVSS4.8AI score0.00123EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/13 12:30 a.m.•12 views

EUVD-2026-98203

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

4.8CVSS4.8AI score0.00123EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/13 12:30 a.m.•33 views

CVE-2026-108944 repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

4.8CVSS0.00123EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-108944: Improper Control of Generation of Code

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

4.8CVSS4.8AI score0.00123EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-111125

Name of the Vulnerable Software and Affected Versions RAE affected versions not specified Description An issue exists in the Config-Driven Model Instantiation component within the get obj from str function located in the src/utils/model utils.py file. Local manipulation of the Target argument can...

4.8CVSS6.1AI score0.00123EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 4:47 p.m.•12 views

Malicious code in nul-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305a606e9edeb69b0670c7df9efe80f4428be765d9f2e69b074edff7d5f22714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/12 4:47 p.m.•9 views

siddheshtea (1.1.6) potentially affected by unknown CVE via nul-rae-naha (1.0.0)

nul-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nul-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163880...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/12 4:47 p.m.•11 views

siddheshtea (1.1.6) potentially affected by unknown CVE via nudel-rae-naha (1.0.0)

nudel-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudel-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163699...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/12 4:47 p.m.•9 views

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

5.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-6359

Malware in sbrugna...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2010-4703

Malware in sbrugna...

7.5CVSS5.8AI score0.01804EPSS
SaveExploits3References10
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•20 views

PT-2024-32340

Name of the Vulnerable Software and Affected Versions flexpmu affected versions not specified Description The issue is related to a possible arbitrary write due to uninitialized data in the pmucal rae handle seq int function of flexpmu cal rae.c. This could lead to local escalation of privilege...

7.8CVSS6.1AI score0.00074EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2023/11/11 3:11 a.m.•10 views

rae-bbp.de Improper Access Control vulnerability OBB-3777102

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/01/21 12:39 p.m.•16 views

rae-butzbach.de Cross Site Scripting vulnerability OBB-3162979

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/11/04 6:42 a.m.•17 views

rae-goetz-monissen.de Cross Site Scripting vulnerability OBB-3035286

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/11/04 6:41 a.m.•39 views

rae-butzbach.de Cross Site Scripting vulnerability OBB-3035284

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/12/28 5:53 a.m.•12 views

rae-butzbach.de Cross Site Scripting vulnerability OBB-2313090

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder